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(57)Abstract: 

PROBLEM TO BE SOLVED: To automatically find and 
exclude a replicated terminal in a communication system 
consisting of a center and a plurality of terminals. 
SOLUTION: The center and a plurality of the terminal 
are connected through a communication network for 
ciphering communication with individual group keys. The 
center sends challenge information, in the case of 
delivering a new group key to the terminals. Each of the 
terminals sends response information obtained by 
ciphering terminal ID and a terminal random number to a 
center public key to the center, which retrieves a 
communication log to inspect the presence/absence of 
terminals, having the same terminal ID and different 
terminal random numbers. If there are corresponding 
terminals, it is determined that the replicated terminal 
exists, and the session key is not delivered. Since 
random number generated by an original terminal is 
difficult to replicate, the replicated terminal cannot 
generate the same random number, so that the 
existence of the replicated terminal can be detected. When the 
multi-address communication of exclusion information that this 
to deliver the same group keys to unchecked terminals. 
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tifrt>m*WB*m^x i>b<o7j]s-y°m£&#>&m<7) 
Mftmttmb lx. ■fx-iztoziix^z 2~wwm 
®bwsffimizmmLt:ijmzm\>^m8.bLti. z 
nmmz Ltzzbdzx *^-x >y7<7)W&mtmm 

•f&ZbifiX-ZZ. 

[oo27] s8mz&m.<7)$mfim*AJi Lxm 

[0028] 

[0029] (hm^®) *«^>sai[<?>jpjBii. * 

fcv^x, *>?tf&y&Mz%iM7)i>-7-m*m(ithfe 
iz, m*.xmL Ltzimtfmmm&z t zmm Lxm 
mwmm*m3£tz> z t ximm*&¥&Lt&ij&v 

hh. -t>?ii. JEMSQ^zli. mfcX*miLf.iftM£ 
m^xy>v-ym^mtL. *^-x -y ^<osB*t=tt. 

■%mx'7ji—ym$:mm-tz> . 

[0030]illi. *J«B<^jtW?BSIfc:fe»t41S« 

-tr y ^ c . &$imz ^-rm^ma-t^mmx'h 
*>?cb7&(offimit. mmmsimMmtiz 
izm<7)mmi&fcx'&mztix^&. *v 

?Cb 7)V-78tm ^iift SrtT^r o iiftJia-C*i» . 
^*(i«gc^J> 9 . i tt*«*(C3_=.-^^SH*IDr* 
ZZX'it. m^mcD^MT^T^o-h. *®*T 



« 
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I 0 0 3 1 ] 02(4. *ffe^^afcO»«fc:tJ»t&a» 

jg&ft^raBKftHtitK 1 ?. -t^* clearer 
mmx^^t^tLtztm.-x^^.^mmx^i.xtm 

ie#S££k^7-'-?^-X-C$>"l>. $ai#a6(4. x 

mask vxim<nmsteWi-*&¥&v*> 

[ 0 0 3 2 ] 03 (4. *«WOiai(?>»»fc*J»t*«R 
T, ajfcfej£#Rll(4. «*tcfcv^T«M^*«m 

^ i ff>y)v~-rmm^mnt. jo-ffr&mmztitz 

IMMHHHaiKi, -^fgII:££*>':?^IPBii£fflV'> 
(4. -fey^*^fflfl$tt^^tf$8i:. S5*«l7£fflv» 

©feM^WIS*M7x-X ( 7i-X# 1 ) 

& . -fe > * t imm*commM%$Ui&?)y)v-y'm 

IEil!7x-X (7i-X#2-A) (?5g£il@T-fcS . II 
6(4. *«BJ<0H«S<^JBM;*J»t4, -fe>-?k*iJ-x-;> 
^60^-rSlffiiM7x-X (7i-X#2-B) C0gf[ 

[00343 ±taoj; 3 izm&ztittmicrmmcoB 

4. l lco«»S*^S.*ftT'(4. ty^Cl:L*«it 

^Ri b k5S*!SiBt£. -te C TElfE U SUISSE 
^lE L < . 3&»o^«rjSit=*J v ^X m t«*ID£JSoi8* 

a^n* ss*astRi b tmmz nx i ^t^cro 



4<Ik £> $>4„ 

[0035] ci<oa«sa*%E*-ifeti» 
i-x(7i-x# i ) ty/u-rmwiMy x.-x (y 

s-X#2) (02OO7x-X*^W. 7i-X# 1 

?(4. 4ffi*T 2 (coV%T(4. f x7? ^SMfflBHj: 0 PI 
t^IDAWLTafttfSSr* £ k 1-4; 

<0i28E6tIE#£J&-t4. 

[003 6] 7x-X#2ti±. -fey* (4. jELUSS* 
4. jEU*tt*T, W4. JJ8*T,36*4«Ufca»-CBf# 
£9^x-y?^*(C*fLT(4. ***<7MB*Ti~T t 

z%mLtemmmz&j8.Lxmffiffiw?&. s*t, 

{4. SS*SLiicS:ffl^T V^itflV-ymZU^ L . 7)V 

&%<mmmcm^x?)v~ym:i&t>h. — 

[003 7]tSS*ll7x-X (7x-X#l ) T 
(4. -fey^C(4. f-rPy^'-W^-Kyx|gSEt4: "9, 
SS*Ti k . -etfOSSS^Ti V ? C tf>&B8*(c J: *) m*§r 

f-^^-x^M'Lt, mmM$& (i8*iD) <o« 

e Lfcss*Ti ' &«aj-r & k . z cosg*i d&^o^- y ~>* 

—y°mglM7 x.~X (7x-X#2-A) T(4. *tV9 

ft*^^.$ixfck#tc(4. -b>^C(4*^-x -y^coiB* 
fcttLT. «IS4i*^SPI^L^:g^'»#$:|5]fKififfl-C- 

[0038] ^\\s> xx>^%m.zmftt& <, 

-fe^^C(4. Hry^a^Z b 5r^Lr, f-^Uy^'CHA 
ktTSSS^TifciUfrrS. SS*Tii±, -fcV^CA»fe« 
flL^-feV ^SLSScZb k . S#A^.^L^.*gl^cRi b 

*ryxRESk LX^^CizWsth. Zix£-t>?C 
&8ffit& ZtlzX*). Sg*Ti k -ecoSg^SL^Ri" 
ISiE-rS. -t>^Cl4. ^*Tik^c0SS85l5SL 

gtRi b k<?)««&?ii2-r-g.o ? * ¥?)vm*>*m^&i%> 
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[00 39] «*SUftRi b <&li&^£fti!WS. Pit* 
5lOfi^**«rt-&«l!38*fc*f LTS8*SL»Ri "Srlg 

mtth. ttzte. Diffie-Hellmangfc&WfeTU^'SrSL 
[0040] T-'-^^-^O^^iKBfl-T-l.. -fcV^C 
fflUiiSpkajStR^' i:,iMfi$iiT#^S*SL^Ri b 

<T)%m.X'h 4 M± ES'IT'# %\,\ 4*. ttmfeWRft 
fcfctf. tSsfeSLRIV* fcttsJ^R^j^Jcaas** 
<50SlifcT-£> 4 4 . «Htt^4i»[V)f 

4 . 

[0041] ^-r^GKOHf^-^Srl^H^-f-l, . 4c ^ 

cat, «HoB^^Lfc«Hsa»*fflv^r, ^p- 

4. 4fc» ££-C«3Bf^U;. ^^yXRESi"cO%& 
(Message Authentication Code: .X-y-fe — i^lSiEtt 

Mfln"t'£4. 

[0042] ?fr—7 , m0&fi&Bti®t6 . -fe C 

rt=*trc . if r^-irrfc x •/ ? t 

ruffles:, *rm<o?>-7i*ca»-$-*a\ 



[0043] 9-)v-^m-w^.<r>^^mmth, 
> vvbtiim ts*afst^fflv ^x . y^-ym^wm. 

5r^L/cbX7K>XRES i b ^3Mfi-r4 <> -feV^Cti. 

Ti #f&5£ L fJls-rm £ . PI taB*SL»fc J: httV 
Bf^-fkLTEiM^-4. 

[0044] *SffttSg£l&BJW-&. S8*Ti*<«aW 

tz . m^yji—ymmsm^ £isi v 

[004 5] JjUi^.t^KfiifcKJ:'?. *SSS*i§*£ 
fit. ^S^^VX^^XRES^^MftL^V^-^fc 

£»4 £ fc #T*# 3rv ^"C. H^Wfciga-fC-T 4 ^ t 
T'£ 4 . 

[0 04 6] ^2t;. 02. H3. 04Sr#SiL^ 

mmim&tT&M. (7x-x# 1 > o#XT- yr 

iz^XMWfh. Wffi&mz&^X. B^LTV^v^ 
^ra»Yi^^-T4„ *>?ciz^ -tyftmmscb 

[0047] I4CSt7x-X#l-lt. 13 1 I/Ztf 
-T-fey^CJi:. ®2<7)gLii±«*ai-C-feVi5'gU!tZ b 
**JfrT&. S*TiC **rWV 
CHA b = Z b 

iHfi¥S2tcJ;'9Mfti-4. 

[0 04 8] 7x-X#l-2t, ia3t^-r^*Ti 

H3^SLiSc^£^Slfc4 0. «*aj^Ri"^^ 
"T4. S^ffi^i^HSiSrfflV^T. S*IDco i fc. 
-te>-^C*>^f--vlxy>?CHA b ^ UTil^^-fe^StiS 
Z"h. ^5|5SLiS:Ri b t(c^-r4T ; 'f >-'^/l^S^SIG 
(Si,(i II Z b II Ri b ))^. i8BES^«*sior*j&-r 
4„ fcfc'L. (x||y){4. xtrifiHfftL. y^T©«f 
t-f 4. flF#<0ii«*S^-. SIG(x,y)(±. ggx2rf£o 

[0049] -fe>-^^aYcSrfflV^T. ffi*IDO i 

«*sLiiiRi b fc. mmmxDstizft-r&mjm 

Ei"=Yc(i II Ri b II Di»} 

= Yc(i || Ri b ||SIG(Si,(i HZ" II Ri b )>) 

ti. y tmxX'Bmit-t&Zb ^^-T. CtLS:. -fev^ 
etc, yiv-r^m^M^miAh^x^yx 
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RESi^Ei^Ycfi II Ri b II Di b ] 

= Yc(i || R A b ||SIG(Si,(i II Z b II Ri b ))] 

ttx. mm^&2Tmmi-&. 

[0 0 50] 7i-X#l-3T, 02tfHr>-?Cfi. 

Srfi&oTl^^^yXRESi^fl-^LT. «*gUS!:Ri b £ 
BlEfc*ffiE#R4T. SB^Ti^SS^&BiMIYi* 
fflwc. SIG(S d ,(i II Z b II Ri b ))2:^iE-r^. tftSBIS 
*#iEUtf&£U\ 4ffi*T i t4i*SUStR i b ^12iiEt^ 
£: LTSWrC. 7i-X# 1 -4^3tttr. «il*6*# 

[00 5 1 3 7i-X#l-4t, -feV:?Ctt. fftaj# 
IBM tcffl v vfc SJfc * ffitft ft T 9£ L *: -f- * X if 

IE#*LT. 7x-X#l-5>v«tr. BBSfcfflvxfcSLft 
j&*a»$;fVOV&» o£9X^-XStGK#i^S^«*§ 
^{i, x-^<-X^E»$^^*SLiltRi b ' t%ii 
L S*SL1: Ri b t k vj- 4 y x -X # 1 - 5 >vit 

-X#2-Bfcitt?. 

[0 0 52] 7x-X#l-5t. -fcry?C{±. 3g*Sl 
^R i b $rftailCK i b i:^. 

[0053]I3C. 12, 03. 05. I26£#{SL 
$r**&. X/W-X8HIS&03MI (7x-X#2) <^)#x 
f-yTSSfflti. 7x-X#2-Atli 

5rIBM-rs. 7x-X#2-Bt'll ixfc 

[0 0 54] 05[:*t7x-X#2- IT'. -k>*C 

EC i >> = CK i <'(GK 1 >] 

LT , iMfi^a 2 J: 0 S*Ti fciSfi-*-* . 
[0055] 7x-X#2-2t. Sg*Ti{i. EI^L 

-C^rv^Sfi^StciO. -te^Bt^tECi" ( =CK i b [G 
K] ) ^mth. i8*aftRi b 2-ftjiHCKi b t LX . 0 

3 osjsi^x^-xggitg* at i^tv^ nf^^Eq 
b (=cKi b [GK)) £«#u x^-x^gk£#s„ an* 

Ti#. -fey^Bf^-S:ECi b (=CKi b (GK]) £Sfrt'#3: 
[0056] B6{:*t7x-X#3-lt, -feV^C 



0^*{ClU$Biift-rS . 7x-X#3-2at\ *f-x 

•y?<7)Mmz. wmnmt&M(DW®mt:m^xm3<?> 

m2<ryy)V-y°m\m.^mzi. 0 . X;P-Xft£fc*. 
[ 0 0 5 7 ] $4 fc. SUBaiRSSi^^iiJiW*. * 

*>o«!8fl!j«oaj8c±jR«^)aj* t la] t itJTl £4 

«iSTt&aj*«*f#oifcj xhh. ziin. nm± 
fcggcoffimimmxz x t, . nsLttza^- Witt & 
&imtfiimxz%^i>cr>xh~?x . *»oaj73*n28bit 

it^^y^h^xT 

[00 58] Iffli^jry- Hk LT. HTOfcO^, 
[00591S5C, S^tttC^V^aWf-*. WHMB 

mm*zm&LX9£zmmzMm-t&zbZBmt-t 

•st^i:) iz^m^m^mm-^^t . «r 
[0060] ise»«. jj-u * 

[0061] imL&mtooh. -mmsiLizmxn. 
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[00 623 ^m<vBmiz&i?&mm>mftMJjm 
[0063] &mm%LL*x.m$. msiLnmmizmi-L 

[0064]gS^i:LT. MfomzaT<7>2-r>cr>i%iztf 
m L^P&Sr biz . im^tf* U ^/«*£tf 

fcHA, -mz?g.m^^xyx'ibh<vx\ ztizm 
mLxumx-zz. 

[0 0 6 5] 2oiii ;!-y^/ma*«offiffl«36«, # 
ti\5&m%izmj]-? y> «om^xh 

izxrt. *>) i?±Mtii&*Mct& . 1 ± 9 . ^ 
J: 0 . ^JE&X y^Xh&Z b ZftfeZilX Lt o tz 

zbizx'ommx^h. 

[0066] BLhOlMtJ: 0 . «IMH3fcJt&8;Tli. 

&)5m±$&X'bz>. 

1 . *m%itmm%tb *hw&wtmkti&i* * . 

2 . — ^rmse La^w^wc* s . 

3. «i«lJWL**fcJ:l^SS5WW4§aJrc*&. 

5 . * u y't;WB*Jt»« >X(c «fc 0 ffiffl S it S . 

6. KilStBi^-^^, &HM**^:«5SL MACfeitfx^ 

is?)vm&-}m±^x'hh . 

[ 0 0 6 7 ] {R£ 1 b 2HSK3(SWldS.r 0 3 4. — 

^3<v&mmmmzii»imtzw. sww«fiw 

^Wfttffit* i: (RS&Tfc 4 . {Rfe 6 {Coweta 
SilH^^fc LTSI«128bitgJg<7)fta«|Bg^^fij 



■^ElGamal Bfr^*S\ l^ll&Obi tgjKtfDflfPJEl Gamal Bf -^Sr 
flfflL MACt LTa*128bitm«<7)*aiiBf^. Hi 
*128bit3gJK<?D»t*yN-y^Ana^WL. J"*? 
A*** LTII*1024bitgJK^DSAS« 1 ^RSAS^ l ^, 

mmeobitm^cDmFivsim^nm-rhzbizx K>m 

[0068] -*ZW8i L£»fc*N-43c£ttfc:ov vest 

b. nm-^-mxtyh. y±iz±K>mmztLfzm®.£ 

[0069] ifc^BticO^^V H^^/P— rafc&oeKs 
[ 0 0 7 0 ] Oj£ 0 . ^;Hl*i:a«fS8*<!^fe^' 

^(D^Mi&i^ux^yxwES^Mmi-^^x. zco 
[0071] mrt*mzm-& ! g£mz-o^xmwt 

h. flKtKWKtt. l^X;K>-XRES§:Sj£-rSReplay At 
tack*^§. l^X*fyXRES^MLT. *>?U. ftil 

" urnm- h t>K zLmmiftiim^i&x'* * v ^-cisjis 
5rv^. {Rjgtcj: ^imm.bmm3:&smmt. 
tF££t£<nx\ v^^ccomm ■ uxtfyxRESiztt-tz, 

wl^zl- &%AAiWffix*bh. wmtrnx'^tzz. 

o%%tfrZimZit&&mzttLXte. *y?ifi&&0> 
-r- ^ie#S • «tWffl5!it^ 4 . L7t*>'o 
T, m^co^xco^^y^coT-^-x^u^ ■ 

■fe v * ^ l x \^ izwmx-h 

[0072] meizmmimco&fcbztizm*.^^ 

JrmbLXiZ. Mtlf. <X£0*SR2t=^$n3t^«?r 

3SliK2[J. Anzai, N. Matsuzaki , and T. Matsumoto, 
A Quick Group Key Distribution Scheme with Entity 
Revocation," Advanced in Cryptology - ASIACRYPT'9 
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9, LNCS1716, pp. 333-347, Springer-Verlag, 1999.] 

[0073] i^«Wrtrife^lBv»fc l o<35WH*tfcfc£l 
yizttvx . try ^-;p-rr k (c»*«o#ft^fx 

[0 0 74] 1. ^X^A^a&Afi. L^VMfik (0 
gdSk-2<n) Sr^-TI>„ dti. f-i>y 

■TO^ftT^-a: -y ^<r>b-th . 

[0075] 2 . i/XfAflfAli, &<9ffi££jj£ 

Uc) k. q (p-l*W)«IS^=a*» (n+k-1 
<q) ) k. g (Z P (cfc(t§^q<7)7c) ££j£LT 

[0076] 3 . ^x^AsagAf*, isxfMmmm 

s(eZq) *ift5£U L#v^ik<^{aMM»a*fflv^ 
t\ UTROkfcO (n + k-l)i©yx?iW 
S. 
a. 

a 0 = S 

b. ZqKtJVvrite*£5£#f6. a lf a 2 , -, a k ^(0 
Sa,Sq-l,lStSk-l, ak-x^OXiSJRh-t 
5. 

f (x) = a f Xx f modq 

c. f (x)£fflvvc < n+k-1 ) liOv'xTSrfh^-r 
•§>. 

Si=f(i) (UiSn + k-1) 
[0 0 7 7] 4. v-X^AWgAti, S x . S 2 , -, 
S n £. am,, T 2 , T D «0i&W«fc LT»* 

[0078] 5 . ^X^A«S|*At±. 
**IHL. Y,, Y 2 . -, Y.tT,, T 2 , -, T n c0 
4MMkL-C. Y n+1> Y nt2> -, Y„ (k .,J^S-(?) 

Yi = g"(Si) mod P (Ui^n + k-1) 
Y =g s mod p 

[0 0 7 9] 6. ^x^A^a^Ati. -tyfommm 

[ 0 0 8 0 ] mz , 7 "7 V H b {C:B(t& w#a<7)^i -y 

i (iw*M7x-x) ti±. 



[0081 ] (7x-X#l-l)t^Cit tftiEJBUE 

v^d (gk-2) fc<0**Ti&8SgU Clix£>£w# 

*tfOIDtfOJfc-£ASr. jE^JSg^^lDm^-A! k4MBSl5fc7)I 

Dm^-A 2 (C^0^ftS„ 

A = A 1 UA 2 . A,nA 2 _=<j!> 

[0082] (7x-X#l-2)t^Cll 7^VH 

CHA= (A || Z b ) 

[0 083] X#l-3]#«*Ti(i 6 A) 

fcL SLffcRi b £^U OT^l-XtfVXRESi ? 
Cti*fi-TI>. RESiKfi. 7x-X'#l-2c7)S*Taa 
tzftt&iti&iT^mMXb . aJRRi^-fey^^iai! 

RESi = Yc( i II Ri» II SIG( i || Z» II R^)) 
[0084 ] (7x-X# 1 -4]-fey^C(i. ?m«S 

wmmmztttz>)/z.#:yxcDiE%&zmm'f&. i^x 

^>-X*^FiET'$).S.^, -b>-^{^*^ID$:m^-A 2 
iZ&mLT. 7x-X2«»l(:^4. — jES 
"C*4*£i=tt. OfcRi b ^SS8*Tii:£0-fe«y^3 V» 

[0085] (7x-X#l-5)ty;Cli, A|*JC^g- 
«*<0*aEJBUBH*#SBLT« J2lT«Ofc:f3»K jEL^Sg 
^iDi+Jft-^/v ^!E^*cmD(+m^A 2 £»t 

*aE8f*7 57'fca»Ri , > £IB8U i ^ft^Aj 
Met*. ^^^h'btciJ^T^aE^^^i. ia#i$ 
tiT^httMbR i *l)m*&%i>. *««l*£*8jiLfc 

[0 086] (7x-X#l-6)t^Cll SLSScRh 

GK w b =Y A (Rh) (GF( P )±cO^*) 
[0 087] 7x-X#2 (^-TUlSiH^x-X) 

-fc -y a >«^fflv%T 9)V-7m:Whmm- & . 
[0 088] (7x-X#2-l)t^CI±, { n 
+ 1, n + 2, •-. n + k-1 } (k-d- 

[0089] (7x-X#2-2]-b>i5'C(i. SUSthi; 
t&gBSIYi ( i 6AU0) SrfflWC, »3ft«fc 
Xk ( k - 1 ) fli^SfBHlWRMiSrttff-rs. 
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X=g~(Rh) (GF(p)±0*») 
Mi=Yi-(Rh) (GF( P ) ±cr>Mn) ( i e A U 0 ) 
[0090] (7x-X#2-3)-fe^Ctt t IpA| 
rt<7)^*fc CO* -y a/ a vat', ffr-rm^it't 
h. 

EGK. b =Enc(R i b,(GK„M) (5) 
[0091 ] [7i-X#2-4H:^C«, #N$flH8 

xmm-tz. 

[00 92] (7x-X#2-5)#«*T i Ji, -fey* 
*>4»8«Y c £Jflvvc s «HfcttWBSr*SM-*. 

GK w b =Dec(R i b ,EGK„ b ) 

(7x-X#2-6)*-f-x -y^tfO#^Ti ( i li, 
(AU0) SHfiBSiSrJBVvC. ifcft 

GK» b =X A (SiXL(AU0U{i(, i) 

xnMj'KAueulil.j) mii* J e (au 

0) ) =X~S (GF( P )±C7)?1|») 

L(V, u) = £{t/(t -u)} modq (ifnti. te(?- 
<u») 

[0093] -^y^-rcO^E^T LT. 4*®lfc3£ 
Ltt77tU-7<7>miZmm LX , *tSS«0ffi* i: . 

±v9x-7)v-ymmk»£®L Lxms-tz . zo-tz, 

[0094] ±IBco*&^ , fteoJ: 3 tc«3«-4 i t # 

mmn®<7)o*>. ^T^coEGK.nmhKcKxh 

AV\ JB*Ti«, SUKRi b $:ffl^T. ^P-rgtY^R 
i" (mod P ) Sr^S. 
[0095] 2 . a»S*c7)*iM«f Bfc 

K JfflV^t . IE L V ^S*Ti iCfcvVf 

fcwc. gSr, g" K mod plcB^^i.&^ht:J; 0, 

< . ikMzMmt &Zti>X'ZZ>. 
[0 0 9 6] 3.mmr>9^ 



[0097] 4 . ^7 ! -^«a#A t «ffl'C* *v*»& 

-fe :x:?o?Mit &IBi^ffr&^& ->xfAf 

§±oi:, «St<7)x-i/x>-h*>\ *RC-fe 
<7tfB*££jftLTf!i3S^*#i£*ffl^*fc&v\ ^3 
(K. Kurosawa, Y. Desmedt, "Optimum Traitor Tracing 
and AsymmetricScheme", Advances in Cryptology-EUR 
OCRYPT'98, LNCS1403, pp. 145-157, Springer-Verla 
g, 1998.] 

[0 098] 5. *>*«ffi*#«B*t^*=Sfc-t* 

;^fx -y ?m&mjmt&7 *> > Fm&x-wm-z 

[0099] 6 .ffinffi^Bf-^-cOfiJffl 

OHM. ilffM. *5|^IH«SH!ISM-Sii:*»T& 
[0100] 7 . Traitor Tracing Schemed i0ffl-£"£ 

c c: -rj*^fcft«***iiffl lx. h tmmttw jiw- 

[oioi] Srfc. ±iew^rar«. *^-x -y ^COS* 

a. mmnm>t>w®mzm^x?';\s-7'mi:'£#>&v> 
(c, km^KirmM&mmt'jzmx'&^tz. z\<m%m 
zwmt ztzib. Meommm<?>±M<oiTmtLxii. 

^.(D^mAlZh^^m^m^Xi^X^. JC^W. Mats 
uzaki, J. Anzai, T. Matsumoto, "Light Weight Broad 
cast Exclusion Using Secret Sharing", ACISP 2000 I 
nformation Security and Privacy, LNCS1976, pp. 313 
-327, Springer-Verlag, 2000.) ZWjjmZmm-t&Z 

tizx o . «*-c« 2 m^^mm^mnx-yju-ym 

Z$Zib&Zbi)' : X'Z&. 

[0102] m&em&jmmAiX'. *ii?tutmm 

VXT<r)£oi,zmh&« 

SSj=ZA(i ,A)xSSi, j (fD«Ji e AlCOV^Tff ^ 
0 ) 

SSi, j=SSj+f j, jX i +-+f k - U X ik-i modq 
T'*>l>. f i.j.-. f h -i.jtt» (k- D1itfOGF(q)cO 

f k-i,j^0 



(?1 4) 102-2 17890 (P200 2-2 1 7890A) 



X'foh. A( i ,A)(±. 

A( i , A) = n<L/(L- i )) (iliLeA-UICO 
WCfrSr? > 

-r m^cofis wiissi , j £«^~sff -r & . fflKWB* 

itsSi, jio. 

S^ESSi.j modq (fttil ^ J £mfc:-?<rvttj"3 ) 

[0103] -fey^cji. fflgiJlMsSi, 

YY i,j = S^ SS i.a (GF(p)±C7)}H^) 

Y i = nYY i , ;i (GF(p)±iOM«) («lil^jSm 
iCO^Tffd ) 

[0104] mucowssmzteo mzmmtz .mi<o 

3Bft4fcJ±3Hk<0^.#»*pt-rft. <p-1 

q fc-T & . ««^*iSt ) * d ( 1 S 

d<n-l)fc-T&. 

[0105]^ffi*Ti(l^iSn)li. d^k-2< 
n£?pf*r$-k£&5£U 

S = EA(i,A)XSi (Mi i eAfcrowcfr&o ) 
*»fe"t-ffl»I«» 1 <^H5«« Si *iKJf CfiM* LT v * 

Si = S + f iX i +--+f k.jX modq 

-C«fc-g>. f i.-, fK-i&. (k-l)fl<7)GF(q)«7n-C- 

f k -i*0 

A(i,A) = n{L/(L-i)} («liLeA-{i}tC-? 
Wtfl? ) 

[o i 0 6] m2<r)wmm*\Jt^h, 

U = ZA(i,A)XUi (fO(±i eA{C-PV»Tff-5) 

V^g-OJi/Si) (GF( P )±i0?am) 
^riH^-rfflS'l^m 2 <D«$S« Vi *«H&fc«f* LT V > 

Ui^U + e^iH hek-jXik" 1 modq 

T"£>&. e,,-,e k .,li. (k- l)ffl<7>GF(q)0DjcT 

e k -i*0 

A(i,A)(i. 

A(i,A) = n{L/(L-i)} («liLeA-{i)(CO 
WCfT&O ) 

<r> k & . 

[0107] (k- 1 ) m<7>m i<o?'$ -oiiHsu 



S ntl = S+fiX(n+l)+-+ fk-iXCn + l)"- 1 m 
od q , • ■ ■ , 

S ntk -i = S+f ,x(n + k- l)+-+f k . 1 x(n + k 

— 1 ) K ~ 1 modq 

£.£*)9m-rh. H«C U n+ ,=U+e,x(n+l) + 
■••+e k - 1 X(n+ l)"- 1 modq, • • , 
U^K.^U+ejXCn + k- 1)+— +e k _iX(n + k 

— 1 ) k_ 1 modq 

ztm-tz. -t>?cu. <s,p,q, g.s,, . . . 

S„ + k-i- Ui- • • ■ U ntk -, «*T 

i«. (Si, Vi, p, q, g) Z&Pf-t&. 

[0108] ty^CIl S^IgfiK^^HiESS^jEL 

Tn.-.TufctlBlrt-ifcfttC. 
( 1 ) ^T&^GF(q)<7)7Cr£:£a6T. ^fsffiSfi 
Cl=s r (GF(p)_hcO?H»:) 

( 2 ) d^OW^l*T ilf -,T id tc*t«Lfc»l<^B 
WHSit.-.S^kUu.-.Ui^fe. dK<&m*7 

mm 

C3 1 = r X Sij +Ui! modq. ■ • • , 
C3 d = rXS id + U id modq 

n+k -i*»feei:(c (k-d - 1 ) m?~oma,x\ ztih 

* S id+1 ,-, S lk .„ U idM ,-, Uik-i fc LX. &.TC0 

C3 d+1 = r XSi, d + i+Ui, dtl modq • - • , 

C3k-i-rXSi, k -i+Ui.k-i mod ^ 
Zim-fZ. «f^ffi*(7)ID#-^i 1( -, i d t. ^S- 
«D I D3#i „♦!,•■•, i k -ifc. SMUiSBCli:. (k- 
1) ffl<7)»i^^'if«C3i.-.C3 k .i*. »IMSfRi:L 

[0 109] -fev^cUL 
K = g A (rXS + U) (GF(p)±c0SI^) 

#*^I6®II S i k V j Srffl l vt ^-rH2r 5 ^ 
{±, 

A= { j , i i , — . i k -i ) 

fcU A(j,A). A(ii.A),-, A(i k _i,A)S:*tf5 
6. *fSfi^fBClfciffi^^fllf8C3 1 .»-,CVii:a* 

Sj t Vj s-fflv^r , 

Wl=SjXA(j , A) 

W2=C3 1 XA(i 1 ,A) + . . . +C3 k -iXA(i k -i. 
A) mod q 

K = (ClXVj) WlXg " W2 (GF(p)±<r,mn.) 
[0110] ±£coi ^f&BB^Sfecom^Tii. 



* m LT«*iD*>ss«r«aE-*- & z. t t-«»^*^^s. 

ST. £ft£fflvvfc«^I£SBI!^*£fc#T*S*. 
[0111] 

-St Lxmwmmzm^xim&vmzizmmv. 

uyiSZ&mLteiffi&li. ?*;yvz:kizmmm.t:£. 

It) Ttt*S8ES:£«SEU 3£3*3Uc£: , «5fe?M8*I 
D££, »|&3#Tfi«Ufc'7'-*'<-.*£*BRl,Ts 

m-t®*iDTfr^m*&i%33\Mw&$itztix^hn 
nmmmtmx. i d£x-?<-x£§£§u .tome 

m-i) twmr*.bzmmLxr>\s-7'mz$ai'r& 

wt^fifca^LT^-ritefcT, jESiS^fc^IE 
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Mkt&Z\bi> t X'Z&b^o$)mmb1xZ>. 
[0112] ttz. MBM*iimn.Zttizb$iz\i.. -fe 

ffi* t jE L v t ^-XS£®#T# , 

i [Hi ] *^«onsi<o^«tc±i(ts^^*^a*ffi 
ttit ity? (Dffi&m . 

[04 ] *S^ma^(z&tt*iagW3t&JH^ 
<^>WH*B*?6J!.7i-X (7x-X# l ) *>SfftfiL 

[05 ] xminmMnMmiz&v&mmikmjjm 
cr>y>v-y°m^my i-x<7i -x# 2 - a ) <ogtfx 
0. 

[06 ] *f^«|iatO»Slfcfc»t4«l^*f6Jtfrft 
cof)U-y°mWM7 x-X (7i -X# 2 - B ) <7)gyi 
0T&&. 
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AT i ^tHS^g 13 
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£ 2 co^/u-^ffas^g: 16 



[04] 

"2) (^-Xffl <*fi*)^ ) 



Cft^^ CHA t b ( = Z ,*> 



v^CHA, k (=Z l v )4:5S« 



«Sc X'V**?^;* RES* 
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II D t »])fr£dEu *^CK^«yx 
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